Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File:                     J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier:          Qsi6UGU+9Yo6KLj7Qrd6/09MT754ODBMUzMfTQI7HFA=
Subject key identifier:   8D:A6:6A:0E:49:F3:1B:E9:6F:3A:73:8C:DF:24:03:C8:25:CE:DB:B8
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer:       /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial:       01936CA2CC4FDFF516FFCA11C396A36CC491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number:          1095
Signing time:             Wed 27 Nov 2024 08:00:28 +0000
Manifest this update:     Wed 27 Nov 2024 08:00:28 +0000
Manifest next update:     Thu 28 Nov 2024 08:00:28 +0000
Files and hashes:         1: D99EYUvNE2Hx77WF9rLDEE77JBQ.roa (hash: pmu6DsdJNAUlYRzgCcRbWYOY9GaPcvSLNrMp/kPNEmg=)
                          2: FgPloXv-iMukbDrRlSZ2_OUskJk.roa (hash: jSNE9PbKCFGdvJ4KdqbNReZywAk+KDGWDNc3yWjz2Ks=)
                          3: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: RUV3ZIWG2RZ9PBYuw27zkNS5dUdBl76rk/zhk+K204A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:a2:cc:4f:df:f5:16:ff:ca:11:c3:96:a3:6c:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
        Validity
            Not Before: Nov 27 08:00:28 2024 GMT
            Not After : Nov 28 08:00:28 2024 GMT
        Subject: CN=8da66a0e49f31be96f3a738cdf2403c825cedbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:0f:2e:c7:17:59:d5:91:60:6c:db:59:aa:
                    2f:a3:c0:99:f1:11:1d:40:7d:bd:6a:3b:3c:1c:12:
                    45:4c:e0:95:18:0c:c5:99:ed:4c:8a:29:64:1f:90:
                    cc:fa:22:34:b1:0b:4c:85:87:58:e4:a0:d0:3a:80:
                    fd:1d:f1:63:91:1d:da:30:6a:37:3e:7d:83:89:6a:
                    7e:27:d3:b9:29:97:4f:b8:c9:55:bd:b2:bd:54:95:
                    c0:27:0d:02:fa:42:e4:af:a1:b9:e6:fa:94:21:34:
                    64:db:11:ad:9d:19:db:95:1e:d5:82:3e:48:64:f9:
                    b9:f8:3f:dc:90:b5:e0:bf:b2:8a:48:e7:a5:7c:1e:
                    44:26:fc:b8:6b:09:2a:e9:21:92:0b:0a:c4:6e:ff:
                    80:72:1e:a9:d9:8f:eb:cc:a6:ab:84:2c:43:42:b7:
                    4e:ef:24:d5:3f:af:a1:f8:53:a1:29:f7:34:6f:04:
                    a7:e9:93:55:67:d3:b4:ef:50:3d:9a:25:13:a8:bd:
                    cc:40:4b:02:57:30:9f:22:87:28:0c:77:08:c8:12:
                    be:a7:30:b5:06:30:e2:73:bd:1d:8d:a8:7c:01:47:
                    67:77:a3:31:a3:a1:88:f5:61:c7:e5:83:54:ce:72:
                    4f:e7:7d:3a:79:6d:12:89:39:e2:b0:58:a1:0b:8f:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:6A:0E:49:F3:1B:E9:6F:3A:73:8C:DF:24:03:C8:25:CE:DB:B8
            X509v3 Authority Key Identifier:
                keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a9:85:23:31:5b:0a:49:33:f4:31:e4:10:7f:a6:12:55:b2:
         e2:2c:0c:82:1f:07:49:03:cd:e7:0d:5a:64:a0:ea:58:fa:2a:
         1c:8e:42:ba:70:de:24:33:3c:e7:92:24:ea:b8:2f:08:bd:10:
         2e:f4:28:99:ef:24:51:2e:b7:14:fd:8f:46:bd:f5:93:5b:eb:
         84:4c:9c:49:c5:4f:46:f4:e7:eb:a2:a7:95:d9:66:e6:ab:26:
         fd:7f:81:06:05:c4:8d:ba:0a:d1:65:fe:5d:4b:f9:ca:f6:48:
         30:e3:35:ad:34:b2:a6:15:4d:05:71:c0:16:19:7c:67:4b:04:
         94:12:29:2f:6d:f5:e3:5a:6f:34:b5:24:b6:ef:68:24:95:98:
         e4:c2:7f:9c:fb:09:1b:90:b3:1f:cc:53:0b:da:df:41:97:dc:
         23:a4:27:fc:f4:2a:2b:fc:10:d1:91:d7:64:00:27:76:36:cd:
         c4:69:de:f7:a0:b7:43:3e:77:98:e6:e3:7b:56:31:3f:f3:2d:
         c2:cc:4f:68:ff:df:35:73:7c:a7:86:6e:40:26:71:c5:23:32:
         b3:27:74:63:09:fe:dd:88:ab:2a:a9:80:6c:49:25:32:b0:a1:
         fd:32:98:91:b9:09:ee:93:a4:5d:64:8f:0f:87:f3:94:d1:2b:
         c2:b5:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:30 2024 by rpki-client on console-ams.rpki-client.org